Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/563E9A6436DE11EC8F8E1A69D8A014CE.roa
File: 563E9A6436DE11EC8F8E1A69D8A014CE.roa (raw, json)
Hash identifier: E73hNaC+umGjebNI5AKg2NvE2yvJyuH06BAyy6YxGwk=
Subject key identifier: 7F:32:B0:02:ED:0B:3B:58:44:65:E7:BE:12:0F:4F:28:B2:81:42:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/563E9A6436DE11EC8F8E1A69D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:28:30 +0000
ROA not before: Wed 27 Oct 2021 04:28:27 +0000
ROA not after: Thu 27 Oct 2022 04:28:27 +0000
asID: 58895
IP address blocks: 45.206.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2883 (0xb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:28:27 2021 GMT
Not After : Oct 27 04:28:27 2022 GMT
Subject: CN=6178d56e-bc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:e5:fc:eb:94:10:94:b9:08:44:52:77:95:
41:49:84:be:50:a9:f3:e4:44:d1:56:1b:b4:fb:d2:
c9:19:4b:5b:84:cb:1f:25:4d:3d:1c:39:82:9e:d0:
0d:20:5d:4f:49:da:f1:29:b1:09:3f:d9:47:69:f3:
9b:51:b5:c6:fe:61:ad:ee:dc:a2:50:6f:08:88:4e:
5e:14:3c:27:ce:15:48:0c:7c:bf:9d:2b:c9:7d:89:
b2:2c:03:07:66:30:d3:d3:ee:47:61:46:a9:e2:f7:
c5:71:40:6e:84:9d:d9:59:59:77:9d:1b:14:5e:14:
6c:66:00:5a:c1:6b:1d:94:87:d1:02:35:11:ee:15:
e5:46:03:ce:cc:09:93:40:a9:d8:d2:66:d5:00:8a:
3e:c9:9e:3f:cd:8e:de:c6:32:0c:18:42:06:78:a9:
86:c0:f9:55:8f:2c:08:72:bc:e2:a2:13:7a:1c:ed:
65:ea:21:96:bf:bb:17:d2:0f:a3:ef:f2:91:8b:d4:
8c:00:dc:80:a6:ef:16:a6:85:9b:01:49:ce:5e:1b:
fc:84:03:80:ae:b1:d7:00:91:1d:58:cc:26:da:4d:
d8:e6:6a:7c:a3:59:0b:5d:ae:a1:6a:7d:11:76:6c:
79:00:14:f0:a4:95:5c:7b:13:96:2d:8e:d5:9b:6a:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:B0:02:ED:0B:3B:58:44:65:E7:BE:12:0F:4F:28:B2:81:42:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/563E9A6436DE11EC8F8E1A69D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.180.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e2:1f:31:88:2f:71:0f:cd:d1:96:a7:0e:23:d6:bb:79:76:
a7:1b:9e:90:35:03:34:a7:13:1e:31:45:cd:00:e3:b0:d5:96:
5e:f1:30:de:03:12:53:12:9c:cc:87:1f:fb:49:c8:6f:db:a1:
50:50:46:f5:58:67:80:e0:e7:ab:fc:82:05:d6:c9:28:5e:47:
bb:e6:11:16:79:bd:81:30:ed:e6:21:cf:59:2d:e2:38:0e:16:
1f:26:78:58:98:ff:13:eb:02:70:6a:c6:54:83:25:69:f2:4a:
fb:68:b2:ba:5a:c2:15:7e:6a:4d:d7:a5:5c:5a:0a:e1:1d:81:
ab:d0:3f:90:d7:81:4a:0a:b9:b5:fc:ce:d6:05:5a:7d:21:4b:
20:7b:b1:c8:3e:03:88:a6:14:ee:8e:e8:0e:ab:7d:eb:a2:aa:
4a:ad:06:70:10:9c:74:51:a8:46:2f:23:26:ee:48:59:d3:2d:
c6:36:7c:58:a8:57:00:2d:c2:4d:4f:1e:bb:56:32:20:32:fe:
34:0e:73:02:66:a3:ff:cd:f6:8d:c8:6b:dd:c7:cf:1e:ae:11:
cf:31:7d:96:d5:bd:ea:ef:13:2b:3d:43:b2:a8:51:41:f5:4a:
05:a5:55:0e:6f:80:fd:d0:db:df:92:29:a7:9e:b8:c7:04:8b:
09:b6:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org